CVE-2008-0073

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html
• lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html
• secunia.com/advisories/28694 · Vendor Advisory
• secunia.com/advisories/29392
• secunia.com/advisories/29472
• secunia.com/advisories/29503
• secunia.com/advisories/29578
• secunia.com/advisories/29601
• secunia.com/advisories/29740
• secunia.com/advisories/29766
• secunia.com/advisories/29800
• secunia.com/advisories/30581
• secunia.com/advisories/31372
• secunia.com/advisories/31393
• secunia.com/secunia_research/2008-10 · Vendor Advisory
• security.gentoo.org/glsa/glsa-200804-25.xml
• security.gentoo.org/glsa/glsa-200808-01.xml
• sourceforge.net/project/shownotes.php · Patch
• wiki.videolan.org/Changelog/0.8.6f
• debian.org/security/2008/dsa-1536
• debian.org/security/2008/dsa-1543
• mandriva.com/security/advisories
• mandriva.com/security/advisories
• securityfocus.com/bid/28312
• securitytracker.com/id
• slackware.org/security/viewer.php
• ubuntu.com/usn/usn-635-1
• videolan.org/security/sa0803.php
• vupen.com/english/advisories/2008/0923
• vupen.com/english/advisories/2008/0985
• xinehq.de/index.php/news · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/41339
• redhat.com/archives/fedora-package-announce/2008-April/msg00143.html
• redhat.com/archives/fedora-package-announce/2008-March/msg00456.html

xine-lib のその他の脆弱性

• CVE-2009-1274中 5.0Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to…
• CVE-2009-0698高 7.5Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash)…
• CVE-2008-5248中 4.3xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3 files with metadata consisting only of separato…
• CVE-2008-5247中 4.3The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, uses an untrusted hei…
• CVE-2008-5246緊急 9.3Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 da…